lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <CABXGCsMcS+H9jxEotmM3u8F28zhPobvT3+Hd_iWstFQN744v6Q@mail.gmail.com> Date: Sun, 14 Apr 2019 22:33:07 +0500 From: Mikhail Gavrilov <mikhail.v.gavrilov@...il.com> To: Linux List Kernel Mailing <linux-kernel@...r.kernel.org>, thomas.lendacky@....com, tglx@...utronix.de Subject: Re: [5.0.0 rc3 BUG] possible irq lock inversion dependency detected Hi! This bug is still present in 5.1 rc4 Why no one answered me? Maybe I wrote something wrong? Please help me. $ /usr/src/kernels/`uname -r`/scripts/faddr2line /lib/debug/lib/modules/`uname -r`/vmlinux speculation_ctrl_update+0x164 speculation_ctrl_update+0x164/0x1d0: amd_set_core_ssb_state at arch/x86/kernel/process.c:383 (inlined by) __speculation_ctrl_update at arch/x86/kernel/process.c:439 (inlined by) speculation_ctrl_update at arch/x86/kernel/process.c:482 -- Best Regards, Mike Gavrilov. On Sat, 2 Feb 2019 at 23:33, Mikhail Gavrilov <mikhail.v.gavrilov@...il.com> wrote: > > Hi folks. > I at last year already caught bug with same signature at kvm subsystem > in 4.18.0 rc8 kernel. It happened when I started virtual machine. And > then Thomas was fixed this bug [1]. > But now it happened when I changed DPI in ProtocaseDesigner (this is > java application which helps design computer cases). And it not > harmless issue because application stuck and I could terminate > ProtocaseDesigner only with `kill -9`. > > Can anyone tell me which mailing list is more relevant to this bug? I > suppose this can be linux-smp or may be linux-x86_64. > > > [ 3534.478386] ======================================================== > [ 3534.478387] WARNING: possible irq lock inversion dependency detected > [ 3534.478390] 5.0.0-0.rc4.git3.2.fc30.x86_64 #1 Tainted: G C > [ 3534.478392] -------------------------------------------------------- > [ 3534.478393] java/13935 just changed the state of lock: > [ 3534.478395] 000000007eda2fa7 (&st->lock){+...}, at: > speculation_ctrl_update+0x164/0x1d0 > [ 3534.478401] but this lock was taken by another, HARDIRQ-safe lock > in the past: > [ 3534.478402] (&(&sighand->siglock)->rlock){-.-.} > [ 3534.478403] > > and interrupts could create inverse lock ordering between them. > > [ 3534.478405] > other info that might help us debug this: > [ 3534.478406] Possible interrupt unsafe locking scenario: > > [ 3534.478407] CPU0 CPU1 > [ 3534.478408] ---- ---- > [ 3534.478408] lock(&st->lock); > [ 3534.478410] local_irq_disable(); > [ 3534.478411] lock(&(&sighand->siglock)->rlock); > [ 3534.478412] lock(&st->lock); > [ 3534.478413] <Interrupt> > [ 3534.478414] lock(&(&sighand->siglock)->rlock); > [ 3534.478415] > *** DEADLOCK *** > > [ 3534.478417] no locks held by java/13935. > [ 3534.478417] > the shortest dependencies between 2nd lock and 1st lock: > [ 3534.478420] -> (&(&sighand->siglock)->rlock){-.-.} { > [ 3534.478422] IN-HARDIRQ-W at: > [ 3534.478426] _raw_spin_lock_irqsave+0x49/0x83 > [ 3534.478429] __lock_task_sighand+0x85/0x180 > [ 3534.478431] do_send_sig_info+0x35/0x90 > [ 3534.478432] kill_pid_info+0x83/0x150 > [ 3534.478435] it_real_fn+0x39/0xf0 > [ 3534.478437] __hrtimer_run_queues+0x110/0x450 > [ 3534.478439] hrtimer_interrupt+0x10e/0x240 > [ 3534.478441] smp_apic_timer_interrupt+0x83/0x230 > [ 3534.478443] apic_timer_interrupt+0xf/0x20 > [ 3534.478446] cpuidle_enter_state+0xbf/0x470 > [ 3534.478448] do_idle+0x1ec/0x280 > [ 3534.478450] cpu_startup_entry+0x19/0x20 > [ 3534.478452] start_secondary+0x1b3/0x200 > [ 3534.478455] secondary_startup_64+0xa4/0xb0 > [ 3534.478456] IN-SOFTIRQ-W at: > [ 3534.478458] _raw_spin_lock_irqsave+0x49/0x83 > [ 3534.478460] __lock_task_sighand+0x85/0x180 > [ 3534.478461] do_send_sig_info+0x35/0x90 > [ 3534.478463] kill_pid_info+0x83/0x150 > [ 3534.478465] it_real_fn+0x39/0xf0 > [ 3534.478466] __hrtimer_run_queues+0x110/0x450 > [ 3534.478468] hrtimer_interrupt+0x10e/0x240 > [ 3534.478470] smp_apic_timer_interrupt+0x83/0x230 > [ 3534.478472] apic_timer_interrupt+0xf/0x20 > [ 3534.478474] _raw_spin_unlock_irqrestore+0x50/0x60 > [ 3534.478476] run_rebalance_domains+0x70/0xa0 > [ 3534.478478] __do_softirq+0xe2/0x46a > [ 3534.478480] irq_exit+0x119/0x120 > [ 3534.478482] smp_apic_timer_interrupt+0xa4/0x230 > [ 3534.478484] apic_timer_interrupt+0xf/0x20 > [ 3534.478486] cpuidle_enter_state+0xbf/0x470 > [ 3534.478488] do_idle+0x1ec/0x280 > [ 3534.478489] cpu_startup_entry+0x19/0x20 > [ 3534.478492] start_kernel+0x52a/0x548 > [ 3534.478494] secondary_startup_64+0xa4/0xb0 > [ 3534.478495] INITIAL USE at: > [ 3534.478497] _raw_spin_lock_irq+0x3d/0x80 > [ 3534.478498] calculate_sigpending+0x22/0x40 > [ 3534.478500] ret_from_fork+0x8/0x50 > [ 3534.478501] } > [ 3534.478504] ... key at: [<ffffffff8e257290>] __key.68419+0x0/0x8 > [ 3534.478505] ... acquired at: > [ 3534.478507] speculation_ctrl_update+0x164/0x1d0 > [ 3534.478509] speculation_ctrl_update_current+0x22/0x30 > [ 3534.478511] ssb_prctl_set.part.0+0x1a/0x20 > [ 3534.478513] arch_seccomp_spec_mitigate+0x25/0x50 > [ 3534.478515] do_seccomp+0x8f1/0x960 > [ 3534.478517] do_syscall_64+0x60/0x1e0 > [ 3534.478519] entry_SYSCALL_64_after_hwframe+0x49/0xbe > > [ 3534.478521] -> (&st->lock){+...} { > [ 3534.478523] HARDIRQ-ON-W at: > [ 3534.478525] _raw_spin_lock+0x31/0x80 > [ 3534.478526] speculation_ctrl_update+0x164/0x1d0 > [ 3534.478528] speculation_ctrl_update_current+0x22/0x30 > [ 3534.478530] arch_prctl_spec_ctrl_set+0xe5/0x110 > [ 3534.478532] __x64_sys_prctl+0xce/0x53c > [ 3534.478533] do_syscall_64+0x60/0x1e0 > [ 3534.478535] entry_SYSCALL_64_after_hwframe+0x49/0xbe > [ 3534.478536] INITIAL USE at: > [ 3534.478538] _raw_spin_lock+0x31/0x80 > [ 3534.478540] speculation_ctrl_update+0x164/0x1d0 > [ 3534.478542] speculation_ctrl_update_current+0x22/0x30 > [ 3534.478543] ssb_prctl_set.part.0+0x1a/0x20 > [ 3534.478545] arch_seccomp_spec_mitigate+0x25/0x50 > [ 3534.478547] do_seccomp+0x8f1/0x960 > [ 3534.478549] do_syscall_64+0x60/0x1e0 > [ 3534.478551] entry_SYSCALL_64_after_hwframe+0x49/0xbe > [ 3534.478552] } > [ 3534.478554] ... key at: [<ffffffff8e1f69c8>] __key.60805+0x0/0x8 > [ 3534.478555] ... acquired at: > [ 3534.478558] __lock_acquire+0x544/0x1660 > [ 3534.478559] lock_acquire+0xa2/0x1b0 > [ 3534.478561] _raw_spin_lock+0x31/0x80 > [ 3534.478563] speculation_ctrl_update+0x164/0x1d0 > [ 3534.478564] speculation_ctrl_update_current+0x22/0x30 > [ 3534.478566] arch_prctl_spec_ctrl_set+0xe5/0x110 > [ 3534.478567] __x64_sys_prctl+0xce/0x53c > [ 3534.478569] do_syscall_64+0x60/0x1e0 > [ 3534.478571] entry_SYSCALL_64_after_hwframe+0x49/0xbe > > [ 3534.478572] > stack backtrace: > [ 3534.478575] CPU: 10 PID: 13935 Comm: java Tainted: G C > 5.0.0-0.rc4.git3.2.fc30.x86_64 #1 > [ 3534.478577] Hardware name: System manufacturer System Product > Name/ROG STRIX X470-I GAMING, BIOS 1103 11/16/2018 > [ 3534.478578] Call Trace: > [ 3534.478582] dump_stack+0x85/0xc0 > [ 3534.478584] check_usage_backwards.cold+0x1d/0x26 > [ 3534.478588] mark_lock+0x188/0x600 > [ 3534.478590] ? print_shortest_lock_dependencies+0x40/0x40 > [ 3534.478592] __lock_acquire+0x544/0x1660 > [ 3534.478595] ? sched_clock+0x5/0x10 > [ 3534.478597] ? sched_clock_cpu+0xc/0xc0 > [ 3534.478600] lock_acquire+0xa2/0x1b0 > [ 3534.478602] ? speculation_ctrl_update+0x164/0x1d0 > [ 3534.478604] _raw_spin_lock+0x31/0x80 > [ 3534.478606] ? speculation_ctrl_update+0x164/0x1d0 > [ 3534.478608] speculation_ctrl_update+0x164/0x1d0 > [ 3534.478610] speculation_ctrl_update_current+0x22/0x30 > [ 3534.478612] arch_prctl_spec_ctrl_set+0xe5/0x110 > [ 3534.478614] __x64_sys_prctl+0xce/0x53c > [ 3534.478616] ? trace_hardirqs_off_thunk+0x1a/0x1c > [ 3534.478619] do_syscall_64+0x60/0x1e0 > [ 3534.478621] entry_SYSCALL_64_after_hwframe+0x49/0xbe > [ 3534.478623] RIP: 0033:0x7fb593d6b25e > [ 3534.478625] Code: 48 8b 0d 2d 3c 0c 00 f7 d8 64 89 01 48 83 c8 ff > c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 9d 00 00 > 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d fa 3b 0c 00 f7 d8 64 89 > 01 48 > [ 3534.478627] RSP: 002b:00007fff7fe07f78 EFLAGS: 00000246 ORIG_RAX: > 000000000000009d > [ 3534.478629] RAX: ffffffffffffffda RBX: 00007fb593b2f088 RCX: 00007fb593d6b25e > [ 3534.478630] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000035 > [ 3534.478632] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 > [ 3534.478633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7fe0c688 > [ 3534.478634] R13: 00007fff7fe0c6b8 R14: 00007fb593b2f158 R15: 0000000000000000 > > $ eu-addr2line -e > /lib/debug/lib/modules/5.0.0-0.rc4.git3.2.fc30.x86_64/vmlinux > speculation_ctrl_update+0x164 > arch/x86/kernel/process.c:371:10 > > Thanks. > > [1] https://www.spinics.net/lists/kvm/msg173197.html > > -- > Best Regards, > Mike Gavrilov.
Powered by blists - more mailing lists